https://behindthecode.vercel.app/posts/sessions-vs-jwt-authentication/